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I. INTRODUCTION 
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We study measurements of the unitary generalization of Pauli operators. First, an analytical 
(constructive) solution to the eigenproblem of these operators is presented. Next, in the case of two 
subsystems, the Schmidt form of the eigenvectors is derived to identify measurements which are easy 
to implement. These results are utilized to show that quantum cryptography with two bases, when 
operating on a two-component qudit, can be realized with measurements on individual subsystems, 
assisted with classical communication. We also discuss feasible devices which perform tomography 
of polarisation-path qudits. 
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, Compared to qubits, higher-dimensional quantum systems improve performance of many protocols and algorithms 
of quantum information processing. For example, additionally to their increased capacity, they make quantum cryp- 
tography more secure [3, H, S] , or lead to a greater reduction of communication complexity M- 

One way to deal 

with a qudit is to find a convenient physical system representing it. A beautiful example is a photon with many 
, accessible propagation paths @, 0|- Another approach, studied here, is to treat many systems of lower dimensions as a 
global higher-dimensional object - a composite qudit. The challenge is to prepare and operate on entangled states of 
fvq [ subsystems and to experimentally realize all global observables. This usually requires difficult conditional operations. 
\Q ■ The preparation of entangled states (at least some of them) is well within a reach of current technology. For 
example, entanglement of two photons, in all degrees of freedom, was demonstrated in Ref. [8j. Each of these photons 
can be regarded as a composite qudit, with subsystems represented by different degrees of freedom. Further, a system 
of two photons can be thought of as an even higher dimensional qudit. 

Here, measurements on such qudits are studied. Some examples are already proposed and realized in a context 
of Bell's theorem [j| [ToL [HI]. The present paper is a generalization of that work. First, the requirements for an 
arbitraryglobal observable are given. Next, a specific class of operators, unitary generalizations of Pauli operators 
[H> EH Eil EH j is described in detail. The importance of this class comes from its applications. For example, the 
operators form a full tomographic set (allow for a reconstruction of a density matrix), appear in quantum cryptography 
01 [H- 0] ■ or tests of local realism [i| E3, EH, El; E3, EBl ■ A solution to the eigenproblem of these operators is constructed 
in full generality and, for a two-component case, the Schmidt representation of the eigenstates is derived. All the 
Qi eigenvectors are shown to have the same Schmidt number. Thus, the sets of entangled and disentangled eigenbases are 
identified, which respectively define the sets of "more difficult" and "easier" realizable operators. A beautiful method 
to solve the eigenproblem of the generalized Pauli operators, based on Euclid's algorithm, was given by Nielsen et al. 

However, since their interests were different, they did not present an explicit solution. The generalized Pauli 
operators have been studied in various levels of detail in many other papers. Nevertheless, the present author could 
not find a general form of the eigenbasis. Here, an explicit compact formulae for eigenvectors and eigenvalues are 
given, as well as a practical procedure how to compute them. 

Although unitary, the generalized Pauli operators are measurable. In quantum mechanics, different outcomes of 
a measurement apparatus correspond to different orthogonal states of a system. Due to the fact that most often 
measurement outcomes are expressed in form of real numbers we are used to connect Hermitian operators with 
observables. However, there are measurement apparatuses which do not output a number. Take a device which 
clicks if a photon is detected or a bunch of such photo-detectors which monitor many possible propagation paths of 
a photon. The operator associated with this apparatus has a specific spectral decomposition (different clicks find the 
system in different orthogonal states). However, the eigenvalues assigned to the clicks can be arbitrary, as long as 
the assignment is consistent, i.e. clicks of the same detector always reveal the same eigenvalue. If one finds it useful 
to work with complex eigenvalues, as it is often the case when considering higher-dimensional quantum systems, one 
can use operators which are unitary, with eigenvalues given by the complex roots of unity. 

With any generalized Pauli operator one can associate a measurement device capable to measure it. We present 
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such devices for polarisation-path qudits, and prove that quantum cryptography with two bases is relatively easy to 
realize as it does not require any joint measurements on the subsystems. As the unitary operators correspond to 
certain measurement apparatuses, they will be often called "observables" . 



II. GENERAL MEASUREMENTS 



Consider a qudit composed of many subsystems, possibly of different dimensions. The measurement of any global 
observable can be viewed as a unitary evolution of the whole system which transforms the eigenvectors of the observable 
into the eigenvectors which can be distinguished by the measurement apparatus. For subsystems of equal dimensions 
arbitrary global unitary operation can be decomposed into local and two-body conditional operations [20( ■ This proof 
can be almost directly applied to the problem studied here, and it will not be repeated. Individual measurements, 
local and conditional two-body operations are sufficient to realize any global measurement on a composite qudit. 

Instead of finding the evolution, one can decompose a global observable into (possibly joint) measurements on 
subsystems and classical communication. Eigenbases of individual measurements form a product basis in a global 
Hilbert space. Eigenvectors of any global observable can be decomposed in this basis. If the eigenvectors factorize, 
that is \j) = |ijv-i)jV-i|iiV-2)Ar-2"-|io)o) where \j n ) n is a state of subsystem n, then there are two possible scenarios: 
(A) a global measurement can be performed with individual measurements on separate subsystems, (B) it can be done 
with an additional use of a feed-forward technique, i.e. a subsequent measurement setting depends on the outcomes 
of all previous measurements. To see this, note that orthogonality of vectors \j) implies certain orthogonalities of 
the states of subsystems, \j n )n- In the simplest case, for each subsystem the vectors \j n ) n form a basis. Then, the 
first scenario, (A), can be applied. The other possibility is that vectors, say |jo)o, form an orthogonal basis, and for 
every | jo)o one has a different set of orthogonal vectors of another subsystem, say and so on. In this case, one 

first measures the particle the states of which span the full basis (in our case subsystem "0"). Next, depending on 
the outcome, another subsystem is measured in a suitable basis. Further on, depending on both previous outcomes, 
yet another subsystem is measured, etc. This is what is called feed- forward technique, (B). If some eigenstates of a 
multisystem observable do not factorize, joint measurements are necessary to measure it. 



III. EIGENPROBLEM OF THE GENERALIZED PAULI OPERATORS 



In any case, the realisation of a global observable is based on the solution of its eigenproblem. Here, a general 
solution to the eigenproblem of the generalized Pauli operators is presented. 

In the Hilbert-Schmidt space of operators acting on vectors in a Hilbert space of dimension d, one can always find 
a basis set of d 2 unitary operators. It has been shown that one can construct such a set using the following relation 

HI Hi IE H^: 

S k i = S%S l z with k,l = 0,...,d-l, (1) 
where the action of the two operators on the right-hand side, on the eigenvectors of S z operator, \k) z , is defined by: 



S z \k) 
SJk) 



= aSI«)» 
= \k + 1) 



with 



OLd 



where n = 0, 1, d — 1, 



i2ir/d 



(2) 



(3) 



The number ad is a primitive complex dth root of unity, whereas the addition, here k+ 1, is taken modulo d. Unless 
explicitly stated all additions are taken modulo d. The operators Ski are called generalized Pauli operators as for 
d = 2 they reduce to standard Pauli operators. They share some features with them [15| . The matrix of any Ski, 
written in the S z basis, has only d non-vanishing entries, one per column and row: 
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The only non-vanishing element of the first column, a "1", appears in the kth row (recall that k = 0,1, ...,tf — 1). 
Generally, the matrix elements oi Ski operator, [Ski] r m, are given by [Ski] r m — $r~-k,mO?d l , where 8 x y is the Kronecker 
delta. Since every Ski is unitary it can be diagonalized: 

S k i = VDV\ (5) 

where V is a unitary matrix the columns of which are eigenstates of Ski, V = (|0), \d — 1)), and D is a diagonal 
matrix with entries being eigenvalues of Ski, denoted by Xj. The form of [Ski]rm and (|5|) imply conditions, which 
must be satisfied by the eigenvectors \j): 

d-l 

AjVk+mjVmj = off'> for all m = 0, d - 1, (6) 

where Vij is the element of the matrix V in the ith row and jth column, i.e. the ith coefficient of the eigenvector \j). 
A study of this condition allows one to construct the eigenbasis. 

We first present the result, that is give a candidate for an eigenbasis, and then prove that this is indeed the 
eigenbasis. Depending on k , the eigenstates of Ski are given by superposition of different number of states \k) z . 
Let us denote by / the greatest common divisor of k and d. Within this definition k = wf is a multiple of /. The 
eigenstates \j) involve every /th state of the S z basis: 

|«>* = \a + r/f) M = \a + r]k) z , (7) 

where rf = 0, dj f — 1 and a = 0, / — 1, and of course rj = wr). Both r/' and r\ enumerate different states \k) z 
into which \j) is decomposed, i.e. r\ = 0, ...,d/f — 1. All other coefficients vanish. The whole eigenbasis splits into / 
groups of eigenvectors which are superpositions of vectors \n) z with fixed a. There are d/ f eigenvectors within each 
group. To uniquely identify the eigenvector \j) one needs to specify a, and additionally an integer 5 = 0, d/f — 1, 
i.e. j = j g a . With these definitions we can present the form of eigenvectors (a candidate): 

/ i 3g,o a 

l l J 

where generally the eigenvalues Xj a are given by: 



\j) = \j g , a ) = A7> d > -\a + V k) z , (8) 

/ J r/—0 



K, a =e^a° d f+al , (9) 

and e lip is a phase factor common to all the eigenvalues. [26j We will show below how to compute this phase. Note 
that the coefficients in © are independent of a. This can be intuitively explained by noting that for different a's the 
eigenvectors \j g , a ) are orthogonal just due to the fact that they involve orthogonal vectors \a + rjk) z . For a fixed a, 
but different g's, the vectors ((SJ are also orthogonal. Their scalar product {j g >, a \jg,a) — {d/f) _1 Y^=o' 1 (^j g > o^j\^ n 
involves the product of Xj g , ^J^ = 9 ^ — oq[iJ g \ and the whole sum is equal to Kronecker delta 6 g >, g . Thus, 
the vectors \jg <a ) form an orthonormal basis. 

To prove that this basis is the eigenbasis one needs to check whether 

Skl\jg,a) = ^j 9 Jjg,a)- (10) 
The action of Ski, defined by (f5]), on the state \j g , a ) is given by: 

S M \j g , a ) = — L= J2 A7 9 >f^ fc +r >%+ ( V + l)k) z , (11) 
yd/ J ^ =0 

Changing the summation index to r)x = t] + 1 one finds: 



d/f 

/ rii — 1 



The coefficients within the sum are equal to the coefficients of the initial \ jg : a) state if for the last term in (|12| . for 
which rj\ = d/f, one has: 

A-f = a7?'*-"" (13) 
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This equation gives the eigenvalues A Jg . If one takes one of the solutions to (fl3|) , say A J0 , in the form Xj 00 = e lv , 
then the remaining solutions are given by Xj g — e^a^^. Indeed, if Xj satisfies (fT3|) . then also Xj g satisfy it. The 
eigenvalues for other a's are given by: 

K,a = K,0«d- (14) 

Note that degeneracies in the eigenproblem can only appear for / =/= 1. (since for / = 1 one has only a ~ 0, and g 
takes all d different values). 

The eigenvalues of Ski operator are rotated in the complex plane by e lip from the complex roots of unity. If one 
puts e ltp — a x d to be some power of ad, from Eq. (fT3|) this power is given by x = ™(j ~ -0- Thus, the eigenvalues of 

kl ^ d 2) 

operator a d 2 1 Ski are rotated back to the complex roots of unity, which can be a useful property. 

Practically, to compute the eigenvectors one should find the value of /. If it is different than unity, set a = 
and compute the coefficients according to Eq. ((8|). For other values of a the coefficients are the same, but now they 
multiply orthogonal vectors \a + r\k) z . To compute the eigenvalues of Ski one needs to solve Eq. (fT3")) . It has the 

kl 

following solutions: A J0 = a d 7 ; The other eigenvalues for a = are obtained by multiplication of ctd/f] The 
eigenvalues for a ^ can be found from HH). 

Example. Take S43 for d = 6, i.e. k = 4, 1 = 3 and one finds / = 2. Put a — 0. From (Ti"3"]) one has Xj g — e Z9 "f = 

ccq 9 = ctg (e l¥ = 1). According to (TT4| . the eigenvalues Aj s l are equal to A Jg a = — Xj g D . This can be summarized in 
the eigenbasis: 
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IV. TWO-COMPONENT SYSTEM 

Consider measurements of the generalized Pauli operators on a system composed of two subsystems, of dimension 
c? = dido- The subsystems are described in Hilbert spaces of dimensions d± and do- We first present a parameterization 
of states of subsystems into which the eigenvectors are decomposed, and next utilize it to describe the structure of 
the eigenbases. It is proven that all of the eigenvectors are either entangled or disentangled. Thus, one identifies the 
operators which can be measured on individual subsystems (with additional feed- forward) , and those which require 
joint measurements. 

Recall that, according to Eq. (0, each eigenvector \j g , a ) involves every /th state of the S z basis, \a + rj ' f) z , with 
rj' = 0, dj f — 1. In turn, each of these states can be written in terms of subsystems, using base-eqdo representation: 

l a + V'f)z = \d0K1 + Kq) z = |«i)i|ko)o, ( 16 ) 

where kq = [a + r]' f]d (the symbol [x]d a denotes x modulo do), and K\ = [(a + rj'f)/do\ — 0, d\ — 1, where \x\ 
denotes an integer part of x. The number of distinct states of subsystem "0" is given by the number of different values 
of Kq. Since other values of a only shift kq, leaving the number of distinct values unaffected, one can put a = 0, and 
thus kq = [r]' f]da- To calculate Ko's one divides / by do, and denotes the integer part of this division by £. Thus, one 
can write / /do = £ + p/do- The integers p and do can have common factors, and the fraction p/do may be simplified 
to an irreducible form P/Dq- Thus, for rj = and 77' = Do (and any multiple of Do) kq equals zero. 

For rj > Do the values of k,q repeat themselves. If one takes an integer x and computes the value of kq for 
rj = Do + x: n = [(Do + x)f]d = [[Dof]d + [xf]d ]d = [xf]d a , it is the same as for rj = x (we have used the 
properties of addition in modulo calculus). Thus there are Do different values of no, or orthogonal states |«o)o m the 
decomposition of every \j g , a )- 

Moreover, for i]' — dj f — d\do/f the value of n again equals zero, i.e. each state \kq)o (one of D distinct states) 
appears in |j flj0 ) exactly the same number of times. This gives the number of orthogonal states |ki)i associated with 
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any given \kq)o, which will be denoted as D\. Since for different rf vectors \a + rj f) z are orthogonal, the states of 
subsystem "1", associated with the same |«o)o must be orthogonal. Notice that d/f factorizes into d/f = DxD , and 
this is a general property of an Ski operator. 

One can introduce an integer Kq — 0, Dq — 1 to enumerate distinct states of subsystem "0" . In a similar way, for 
a fixed state |ko)o> one can enumerate orthogonal states of subsystem "1" with an integer K\ — 0, D\ — 1. Since 
r\ = 0, D\Dq — 1, it can be decomposed within the new variables Ko and K\ as: 

r, = D Kx+K . (17) 

Within this decomposition every state \a + T)k) z , into which the eigenvectors are decomposed, (JSj) , can be written as 
\a + Kgk + DgkKi) z . To find its base-iiicio form one needs to divide a + K$k + D$kK\ by do, and extract integer and 
modulo parts. Since k = wf one finds that Dok/do — wDof /do — wDo£ + P is an integer, or equivalently Dok is a 
multiple of do. That is, Dok does not contribute to the modulo part, and one can write: 

\a + f]k) z = \[{a + kKo)/do\+^kK 1 ) 1 \a + kKo)o- (18) 

do 

Let us summarize the parameterization just described. In the decomposition of any \j g , a ) one finds Do distinct 
states of subsystem "0", \Ko{a : Ko))o = \a + kKo)o, with Kq = 0, ...,£>o — 1- I n turn, for a fixed Ko, there are D\ 
distinct states of subsystem "1", \ni(a, Kx,Kq))x = | [(a + kK )/do\ + ^-kKx)x- 

Within this parameterization any eigenstate has the following form: 

. £>0-lZ>i-l 

\jg,a) = -rrrTT E E c (D Ki+K )k,j 3 jKx(a,Kx,Ka))x\Ka(a,Ko))a, (19) 
VD1D0 K()=0Ki=0 

where the coefficients Cm Kx+Ka)k,j a denote the phase of coefficients in Eq. ([8]). 

To understand the structure of the eigenbasis take for a fixed state \no(a, K ))o in Eq. (fT9|) . the state of subsystem 
"1" with which it is associated, namely: 

l Di-l 

= -7jj= E c (DoK'i+ifo)fc,j 1 ,,al K i( >^i)- K 'o)>i- (20) 

V 1 Kt=0 

It will be shown that within the same eigenvector \jg t a)i an y f w0 states \ipK,o,j g a)i an( i I^Kq^s a^ 1 ' ^ or K ° ^ K o> are 
either orthogonal or </ie same. A similar result holds for the states of different eigenvectors, with the same value of 

Kq. 

Let us first consider states of subsystem "1" within the same eigenvector. Their scalar product, i(ip K ' ,j g JV'koJs a)ii 
is given by: 

Di-l Di-l 

E E c \D K[+K' )k, Jgta c (D K 1 +K )k l3g , a \(K,x{a,K[,K' Q )\Ki{a,Kx,K ))-L. (21) 
i<-;=0-R"i=o 

Since for different k 's the states \ni(a, Ki, K ))i are shifted, the scalar product 1 (ip K > Jg a \i/j Ko Js>a )i is ei- 
ther equal to zero, if the individual states involved are orthogonal, or it is equal to the sum of D\ terms: 
X^=o c *D Ki+K')k j C (D K 1 +K )k.j g a - Using explicit form of the coefficients one finds that the scalar product 
is proportional to: 

~ JT l>f (22) 

where the only relevant terms are given, involving in the exponent the products of K\ and Ko- Since k = wf and 
d = DiDof, right-hand side equals to the Kronecker delta: 

l(V're&,j s ,alV , Ko,J 9 ,a)l ~ &wl{K -K> ),nD^ (23) 

with [i = 0, 1, 2, .... The states of subsystem "1" are either orthogonal or the same (up to a global phase, which can 
be put to multiply them). If the Kronecker delta is equal to one, one has \4>K, ,j g a )x = e \ipK' ,j g a )i, i- e - a vector of 
subsystem "1" is multiplied by a superposition of corresponding |kq)q's, with coefficients defined by (|19|) . respectively 
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multiplied by the phase e 1 ^ . Since different |«o)o's are orthogonal, every vector \j g>a ) can be written as a superposition 
of bi-orthogonal product states. In other words, one has a Schmidt decomposition of the eigenvectors. 

Moreover, for different eigenvectors, the states IVVeojjsa)* an< ^ iVVto.i i ')' which correspond to the same state of 
subsystem "0", are also either orthogonal or the same. Their scalar product i(ip Ko ,j , a , |^K .i 9 ,a)i involves scalar 
products i(Ki(a' , K[, Ko)\Kx(a, Ki, Ko))i. For different eigenvectors the states |Ki(a, Ki, i^o))l can be shifted, and 
one has: 

i<^o,v,JVw 9 ,Ji (24) 

1 if 1= 

Since the product of eigenvalues, Xj g , A~ Q , is equal to o^// 9 — ct 9 D ~^ Ql one has: 

1 Dl_1 

l(^o,V, a J^oJ 3 ,Jl ~ 7J" 51 a D\ (9 ~ §) = S 9'-9^D 1 , (25) 

1 if 1=0 

with /i = 0, 1, 2, .... Notice that the last Kronecker delta does not depend on kq. E.g., if for some kq one finds that 
vectors \if> Ko ,j < a >)i an d fynodg <»)i are orthogonal, then the same relation holds for any other kq, i.e. all the eigenstates 
have exactly the same number of terms in the Schmidt form (the same Schmidt number). If 5 g >-g_ fJi D 1 = 1 all the 
states \ipK ,j g a )i in the decomposition of |jg j0 ) are the same (up to a global phase) as those entering \j g ^ a ')- In this 
case the coefficients which multiply products \tp Ko ,j ga )x \kq{o,, Kq))q make the two eigenvectors orthogonal. 

To conclude, given that only individual measurements on subsystems are available to an experimenter, she/he can 
learn from above considerations whether it is possible to measure a generalized Pauli operator defined on the whole 
system (of two components). 



V. TWO-BASES QUANTUM CRYPTOGRAPHY 



Let us apply the developed formalism. Consider a two-bases quantum cryptography protocol with higher- 
dimensional systems, as described in Ref. Q. One has a qudit randomly prepared in a state of a certain basis, 
or of another basis, which is unbiased with respect to the first one [2 ll. l22j|. The measurement basis is also randomly 
chosen between these two [27| . Interestingly, if a qudit is composed of two subsystems, the measurements involved in 
the protocol do not require any joint actions. 

The two mutually unbiased bases can be chosen as the eigenbases of S z and S x operators. Using the above 
construction to S x — Siq one immediately finds, for arbitrary dimension, the well-known Fourier relation between the 
S z and S x eigenbases: 

d-l 

\3) x = ^=Y. a T 3 W)?- (26) 

Let us define the eigenbasis of a global S z operator as: 

\k) z = Mo«i +Ko)z = |ki)i|«o)o, (27) 

where Ki = 0, ...,<fj — 1, and |ko)o> denote the states of subsystems "0" and "1", respectively. Within this 

definition a measurement of the global observable S z is equivalent to individual measurements on the components. 
These individual measurements reveal the values of kq and K\, and the eigenvalue of S z is Q c ^ >Kl+h -° [due to Eq. ©]. 
To measure S x one uses the definition (f27|) and the fact that d — dido, and finds that: 

= -7T E «^ okij k>i® At £ «r oj K>o, (28) 

where we have used the symbol ® to stress the factorization of this state. For j = ji + dijo the state of subsystem 
"1" reads: 
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Since = a^, see ([3]), and e l2,TKl Jo = \ a measurement on this subsystem in the basis: 

i^)i = 4=E a r iji i^i)i, (30) 

V"i Kl=0 

reveals the value of j\. The value of jo can be measured once ji is known. A measurement in the basis: 

^o>0 = ^=E^ Ol+<iUO)KO | K 0)0' ( 31 ) 

on the subsystem "0" reveals the value of jo- In this way all values of j can be measured using individual measurements 
only, where the measurement on subsystem "0" depends on the outcome of the measurement on subsystem "1" (feed- 
forward technique). 

VI. QUANTUM TOMOGRAPHY 

Another application utilizes the fact that the Ski operators form a basis in a Hilbert-Schmidt space, and thus can 
be used in quantum tomography. Quantum tomography (reconstruction of a density matrix) aims at an estimation 
of an unknown quantum state. The tomography of qubits was described in [23| . Soon after, the generalization to 
higher-dimensional systems was given in [241 ]. The approach described there is based on Hermitian operators. Here 
we follow the unitary operators approach, and explicitly present, in the next section, suitable devices to perform 
tomography of polarisation-path qudits. 

Since d 2 qudit operators Su form a basis in the Hilbert-Schmidt space, they uniquely describe an arbitrary state 
of a qudit: 

p = 2-s Skl Ski, (32) 

k,l=0 

where soo = 1 for normalisation as all Ski operators are traceless, except the identity. Tomography means to establish 
(measure) all of the Ski coefficients. Since the Ski operators have the spectral decomposition Ski = 2j=o ^j\j)U\- the 
coefficients Ski can be written as: 

d-l 

Ski = Tr(Sltp) = Yu A;Tr(|j)0». (33) 
i=o 

The eigenvectors |j) form an orthonormal set, and the trace gives the probability, pj, to obtain the jth outcome in 
the measurement of Ski on the system prepared in the state p. Finally, to perform tomography one needs to build the 
devices capable to measure Ski, and collect data to estimate probabilities (relative frequencies) of different outcomes, 
Pj. We focus on measurement devices for polarisation-path qudits. 

VII. POLARISATION-PATH QUDITS 

Although the general requirements for a measurement involve feed-forward and joint operations on subsystems, 
there are certain physical realisations of composite qudits which incorporate these requirements in a simple way. The 
polarisation-path qudi t is an example. There, a qudit is encoded in a polarized photon, which has many possible 
propagation paths [28j |. First, we explicitly present devices capable to measure all Ski operators in the simplest case 
of two paths. Next, the setups for any number of paths are discussed. 

Consider a polarized photon with two accessible paths. Its state is described in a four dimensional Hubert space, 
i.e. there are 15 different Ski operators to measure (we put soo = 1 from the very definition). However, some of them 
commute (contrary to the qubit case) and the measurement of one of them reveals the values of the others. 

From the definition, the eigenstates of S z are given by: 



|0), = |0,)i|0,) 0j = |0 2 )i|l 2 ) o , 

\2) z = |Ui|0 2 ) o , |3) z = |l,)i|l,) , 



(34) 
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FIG. 1: Feed-forward is not needed for polarization-path qudits - it is automatically realized behind the beam-splitter. This 
setup measures the operator S x , for d — 4. The ~ phase shift (PS(7r/2)) in the path |l z )i and the beam-splitter (BS) perform 

the path measurement, . The path state |0a;)i goes to the upper arm where the polarisation is measured in the o"i°' basis 
with the polarizing beam-splitter which transmits \O x )o (denoted as PBS45). In case of the path state 1 1^ ) i the photon goes to 
the lower arm, where its |l z )o polarisation component is phase shifted by — 5 (PPS(— 7r/2)). Next, the photon enters PBS45, 
and is detected in one of its outputs. The eigenvalues corresponding to clicks of each detector are also written. 



where subsystem "0" is a polarisation of a photon, and subsystem "1" is a path. E.g. \2) z = |l z )i|O z )o denotes a 
horizontally polarised photon in the path |l z )i. The z index inside the two-level kets denotes the fact that they are 

chosen as the eigenstates of the individual ai^ operators, i.e. (T z n ^\b z ) n = (— l) b \b z ) n . The device that measures 
S z simply checks which polarisation a photon has in a certain path. This can easily be achieved with polarizing 
beam-splitters. Moreover, the same device also measures the values of Si and S z , as these operators commute with 
S z . Their eigenvalues are powers of the S z eigenvalues. Interestingly, the observables £21 and S23 can be measured 
in a similar way. After expressing the eigenvectors of, say, S21 in the \n) z basis, and with definitions one finds: 

|0) = KhlUo, |1> = |0„)i|0 a ) , 

|2) = |l„)i|l,>o, |3> = |l„)i|0 2 ) o , (35) 

where \b y ) n is the eigenbasis of the individual ay operator, \b y )„ = -^j(|0 2 )„ + i(— l) fc |l z )„). To measure this 
observable the paths meet on a beam-splitter (which gives a phase ? to the reflected beam) where different eigenstates 
\b y )i are directed into different output ports, followed by polarizing beam-splitters. 

The S x = Sio observable (and its powers) can be measured individually with an additional feed-forward. Also S12 
and S32 are measurable in this way. To see how the feed-forward method is realized, let us study the S x observable. 
Its eigenvectors read: 

|0> = |O at ) 1 |O ai >o, |l} = IUi|O a )o, 

|2> = IfUxlUo, |3) = |U 1 |l a ) , (36) 

where the index x denotes the eigenbasis of the individual Ox operator, given by \b x ) n — -i=(|0 2 ) n + (— l) h \l z ) n ). 

Depending on the outcome of the path measurement in the e>4 basis, polarisation is measured in the <r x ^ or 
basis. However (here comes the beauty of the approach utilizing the paths), appropriate phase and a beam-splitter 
drive different path eigenstates into different output ports of the beam-splitter. In this way feed-forward is not 
needed. It is now enough to put polarisation checking devices behind the proper outputs of the beam-splitter (see 
Fig. [p. 

The eigenstates of the last five observables are maximally entangled states of subsystems. Some of these observables, 
to keep the spectrum in the domain of fourth roots of unity, need to be multiplied by 7 = a]/ 2 — e M / 4 . Take as an 



Y S xS z 
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FIG. 2: Mach-Zehnder interferometer, with a polarisation rotator in one arm, followed by polarizing beam-splitters, is the most 
advanced device used in measurements of Ski, for d = 4. This setup, which measures the operator 'ySxSz (with 7 = e" 1 ' 4 ), 
distinguishes maximally entangled states of paths and polarisations. First, with the £ phase shift (PS(7r/2)) and the beam- 
splitter (BS), the ax eigenstates are converted into eigenstates. Next, the 7r/4 phase (PS(7r/4)) is applied in the lower 
arm, where |U)i is directed. In the upper arm polarization is rotated (with the plate rv), such that in both arms it is the 
same. Finally, specific clicks behind the beam-splitter and polarising beam-splitters distinguish the states (|37[) . 



example Su operator in the form Su = jS x S, 
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jS x S z . 


Its eigenstates are given by: 




= (1/ 


V2) 


|0x)i|l»)o-i7|l-)i|0,)o 


11) 


= (1/ 


V2) 


|Ox)i|0,)o-*7|l*>i|l«>o 


|2) 


= (1/ 


V2) 


|O s ) 1 |l,)o+ *7|l*>i|0*>o 


|3) 


= (1/ 


V2) 


|0 x )i|0 z )o + z7|lx>i|l,>o 



(37) 



To distinguish between these states one needs to build an interferometer like the one in the Fig. O The same setup 
measures S22 and S33, which commute with S\\. Finally, when different phase shifts are used, this setup also measures 
the remaining S13 and S31 observables. 

To sum up, the most involved device, used in the measurements of generalized Pauli operators on a composite 
qudit encoded in two paths and polarization of a photon, involves Mach-Zehnder interferometer with a polarization 
rotator in one arm, followed by polarizing beam-splitters (Fig. [2]). Most of the observables are realizable with a single 
beam-splitter followed by polarizing beam-splitters. 

Generally, it is possible to perform arbitrary Ski measurement on polarized photons with many, d±, accessible 
paths. With polarising beam-splitters in each propagation path one transforms initial polarisation-path state |j) 
into a double- number-of-paths state \p), in 2di dimensional Hilbert space (each polarising beam-splitter generates 
two distinct spatial modes). According to Ref. (25j one can always realize a unitary which brings the states \p) to 
the states of well-defined propagation direction. Thus, 2d± detectors monitoring these final paths distinguish all the 
eigenvectors \j). 



VIII. CONCLUSIONS 



Higher-dimensional quantum systems can find many applications, both in foundations of physics and in applied 
quantum information. A method of construction of qudits, studied here, is to compose them of other, lower dimen- 
sional, subsystems. In such a case, if a global observable has some entangled eigenvectors, its measurement naturally 
requires joint actions on subsystems. If eigenvectors factorize, the observable is measurable individually, sometimes 
with an additional feed-forward. Thus, in order to design a setup capable to measure an observable, its eigenproblem 
must be solved. 

Here, the eigenproblem of the unitary generalizations of Pauli operators is solved, for arbitrary dimensions, and 
Schmidt decomposition of the eigenvectors, for qudits composed of two components, is derived. Using these results 
quantum cryptography with two bases, operating on a two-component qudit, is shown not to involve any joint 
measurements. 
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Finally, simple optical devices, capable to measure all generalized Pauli operators on polarisation-path qudits, are 
presented. These experimentally feasible devices allow full state tomography. In case of two different paths, the most 
complicated device is a Mach-Zehnder interferometer, with a polarisation rotator in one arm, followed by polarizing 
beam-splitters. 
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